Lucene search
+L

9020 matches found

Cvelist
Cvelist
•added 2019/10/31 7:05 p.m.•58 views

CVE-2013-1930

MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues...

5AI score0.01219EPSS
SaveExploits0References8
CVE
CVE
•added 2019/10/31 7:05 p.m.•94 views

CVE-2013-1930

CVE-2013-1930 affects MantisBT 1.2.12 prior to 1.2.15, enabling authenticated users to bypass the workflow restriction and close issues. Root cause details are not provided beyond the bypass of workflow checks. Impact is limited to issue state manipulation by authenticated users; no exploitation ...

4.3CVSS4.9AI score0.01219EPSS
SaveExploits0References8Affected Software1
Mend
Mend
•added 2019/10/31 7:05 p.m.•6 views

CVE-2013-1930

MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues...

5.3CVSS0.01219EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/31 12:00 a.m.•8 views

CVE-2013-1930: Improper Input Validation

MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues...

4.3CVSS5.6AI score0.01219EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/10/31 12:00 a.m.•7 views

PT-2019-6861

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.12 through 1.2.14 Description The issue allows authenticated users to bypass the workflow restriction and close issues. Recommendations For MantisBT versions 1.2.12 through 1.2.14, update to version 1.2.15 or later to...

4.3CVSS0.01219EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2019/10/18 12:00 a.m.•47 views

Oracle E-Business Suite Multiple Vulnerabilities (Oct 2019 CPU)

The version of Oracle E-Business installed on the remote host is missing the October 2019 Oracle Critical Patch Update CPU. It is, as noted in the October 2019 Critical Patch Update advisory, affected by flaws in the following components : - Oracle Advanced Outbound Telephony - Oracle Application...

8.2CVSS6.5AI score0.01563EPSS
SaveExploits0References11
NVD
NVD
•added 2019/10/16 6:15 p.m.•35 views

CVE-2019-2925

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Worklist. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful...

4.3CVSS3AI score0.01218EPSS
SaveExploits0References1
Prion
Prion
•added 2019/10/16 6:15 p.m.•28 views

Design/Logic Flaw

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Worklist. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful...

4.3CVSS3.7AI score0.01218EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/10/16 5:40 p.m.•40 views

CVE-2019-2925

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Worklist. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful...

4.1AI score0.01218EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2019/10/16 5:40 p.m.•16 views

CVE-2019-2925

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Worklist. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful...

5.2AI score0.01218EPSS
SaveExploits0References1
CVE
CVE
•added 2019/10/16 5:40 p.m.•78 views

CVE-2019-2925

CVE-2019-2925 affects Oracle E-Business Suite, Oracle Workflow, Worklist component. Affected versions: 12.1.3 and 12.2.3–12.2.8. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Workflow, with exploitation requiring human interaction. Conseque...

4.3CVSS4AI score0.01218EPSS
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
•added 2019/10/16 4:38 a.m.•17 views

jenkins-plugin-workflow-remote-loader: Unsafe Script Security whitelist entry in Pipeline Remote Loader Plugin (SECURITY-921)

A flaw was found in the Jenkins Workflow Remote Loader plugin. An unsafe whitelist entry was made that allowed invoking arbitrary methods and bypassing sandbox protection. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

9.9CVSS6.7AI score0.01939EPSS
SaveExploits0References5
CNVD
CNVD
•added 2019/10/16 12:00 a.m.•21 views

Unspecified Vulnerability in Oracle E-Business Suite Workflow

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. Workflow E-Business Suite is one...

4.3CVSS6.6AI score0.01218EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/16 12:00 a.m.•3 views

CVE-2019-2925: Undefined Security Weakness

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Worklist. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful...

4.3CVSS5.5AI score0.01218EPSS
SaveExploits0References1
Symantec
Symantec
•added 2019/10/15 12:00 a.m.•39 views

Oracle E-Business Suite CVE-2019-2925 Remote Security Vulnerability

Description Oracle E-Business Suite is prone to a remote vulnerability in Oracle Workflow. The vulnerability can be exploited over the 'HTTP' protocol. The 'Worklist' component is affected. This vulnerability affects the following supported versions: 2.1.3, 12.2.3 through 12.2.8 Technologies...

1.3AI score0.01218EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2019/10/15 12:00 a.m.•4 views

PT-2019-3722

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 and 12.2.3 through 12.2.8 Description The issue is related to inadequate access control in the Oracle Workflow product, specifically the Worklist component. It allows an unauthenticated attacker with...

5CVSS0.01218EPSS
SaveExploits0References6
Akamai Blog
Akamai Blog
•added 2019/10/11 8:00 p.m.•158 views

Faster On-Boarding for Performance and Security Products

As part of our October release, we are making our onboarding experience much faster and simpler. These benefits are extended to new customers looking to onboard and protect new hostnames on Akamai - as well as existing customers looking to spin up, test, and protect new functionality within their...

0.7AI score
SaveExploits0
Akamai Blog
Akamai Blog
•added 2019/10/11 8:00 p.m.•229 views

Access Revocation: A Content Provider's Tool to Block Pirates in Real time

Akamai Announces New Capability to Allows Content Providers to Shut Down Sources of Piracy ... The Growth of Global Online Video Consumption and Piracy Media and entertainment companies, including Content owners and Over-the-top OTT service providers are living in an era that provides them an...

0.6AI score
SaveExploits0
Qualys Blog
Qualys Blog
•added 2019/10/07 2:00 p.m.•197 views

Enhanced API Scanning with Postman Support in Qualys WAS

Due to the fast-growing usage of REST APIs, having a way to test them for vulnerabilities in an automated, reliable way is more important than ever. Automated testing of APIs is a little trickier than for web applications. You can't simply enter a starting URL for the scanner and click "Go"...

7.3AI score
SaveExploits0
Carbon Black Blog
Carbon Black Blog
•added 2019/10/03 1:49 p.m.•43 views

Partner Perspectives: Disrupt Advanced Threats with Blumira + Carbon Black

Matt Warner is the CTO of Blumira. Modern security challenges are not easy to fix or even identify, and despite misleading advertising from some vendors, there is no one-size-fits-all solution. Blumira frequently observes large visibility gaps in existing security implementations, allowing obviou...

0.8AI score
SaveExploits0
Rows per page
Query Builder